The spin model checker : primer and reference manual - Holzmann, Gerald J., 1951- (Addison-Wesley, 2004)